$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa File: 84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa (raw, json) Hash identifier: 1OxsKBfW9Xmcma5OmIfB732Jc4uOWDDZNWgGX3oSAJY= Subject key identifier: DC:E2:22:B0:34:FB:A2:9C:35:41:FD:BE:90:81:E2:49:51:67:A3:92 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E71AFDBDF833673EB8B120 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 399195 IP address blocks: 107.148.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1a:fd:bd:f8:33:67:3e:b8:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=ffec1061-1355-4725-89bb-fb443197b66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:1d:95:ea:e9:78:cb:f6:12:4c:68:cb:0d: 06:f8:15:27:df:74:14:f5:95:9e:e5:af:48:57:e7: bd:58:a0:18:21:14:6f:45:34:b9:eb:aa:27:e3:d1: fd:32:a2:c3:57:ed:2d:fc:72:6b:7e:18:9f:47:e7: c7:fe:ca:ea:e9:25:da:38:58:60:39:7e:58:d3:c5: 33:c6:4c:43:87:7c:6a:a2:83:c2:e1:aa:9d:f0:3b: 0b:c5:f4:9c:e0:78:9c:60:50:51:31:c9:d3:84:89: 88:6d:cf:fc:a1:58:ae:28:78:a1:12:66:62:1c:90: 01:63:16:1b:25:51:42:f0:71:4b:3c:72:0d:fc:bd: 6c:60:7b:d8:a0:d5:1f:ca:fc:54:ce:65:65:52:c6: 58:39:90:47:65:9b:04:7c:6d:d2:a2:ee:ed:92:a2: e7:2a:6b:7c:76:ff:1a:2d:00:cf:76:69:e3:d8:b3: 3b:74:89:a5:67:ae:1d:6a:3d:59:f0:4b:f2:a0:c9: 0b:d5:19:de:0c:7c:af:8a:b8:63:c8:b5:97:31:f2: 82:bc:7f:ae:bb:a2:e9:38:c8:bb:d4:62:87:97:67: c4:72:75:f6:f2:8d:f6:9b:95:84:38:a9:c8:be:31: 18:b2:39:4e:c4:3b:91:9c:99:b5:0e:34:1a:52:34: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E2:22:B0:34:FB:A2:9C:35:41:FD:BE:90:81:E2:49:51:67:A3:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:83:93:35:b4:e3:9f:32:81:98:08:6c:d9:80:e9:cf:48:e2: be:2e:0e:d4:64:fa:cf:a0:e2:f2:71:e4:ac:90:d2:ad:63:80: f2:56:8b:cf:58:4d:bd:f7:2b:02:16:ed:f7:fd:93:fc:8c:66: 83:45:fc:38:9a:53:8d:77:98:31:16:03:3a:1c:c5:ad:de:23: 28:21:f1:8f:51:10:ab:27:39:8b:9f:5b:46:83:44:93:d9:51: bf:14:41:b8:30:0c:4d:82:4b:1a:92:4a:23:2f:0e:5e:36:57: a4:b4:b0:9f:30:2a:53:ba:1d:30:7a:2d:46:c7:01:1c:f7:f9: 0c:42:ca:ba:42:a5:78:57:1e:1d:1f:48:15:13:9c:94:fe:8a: 66:70:c2:ec:0c:c9:63:d9:bf:dc:05:bc:b8:a0:8b:e8:7c:cd: 63:43:5a:5f:5e:3e:2e:47:ff:30:52:6a:fb:df:c8:0b:dd:2e: b0:ab:73:8f:cb:ed:3a:65:18:60:89:b9:a8:44:7f:ef:d4:c7: 3d:fc:44:f2:ab:5f:33:41:61:71:19:1b:ca:3a:28:2a:90:3e: 52:ee:55:3c:ac:ed:cc:59:f8:c1:dc:f4:ad:5b:07:7d:ba:8d: e0:c9:95:57:95:84:ed:c1:15:4c:a9:05:1b:fe:ef:b2:1d:18: 24:6c:42:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xr9vfgzZz64sSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmZlYzEwNjEtMTM1NS00NzI1LTg5YmItZmI0NDMxOTdiNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoccdlerpeMv2Ekxoyw0G+BUn33QU9ZWe5a9I V+e9WKAYIRRvRTS566on49H9MqLDV+0t/HJrfhifR+fH/srq6SXaOFhgOX5Y08Uz xkxDh3xqooPC4aqd8DsLxfSc4HicYFBRMcnThImIbc/8oViuKHihEmZiHJABYxYb JVFC8HFLPHIN/L1sYHvYoNUfyvxUzmVlUsZYOZBHZZsEfG3Sou7tkqLnKmt8dv8a LQDPdmnj2LM7dImlZ64daj1Z8EvyoMkL1RneDHyvirhjyLWXMfKCvH+uu6LpOMi7 1GKHl2fEcnX28o32m5WEOKnIvjEYsjlOxDuRnJm1DjQaUjTYVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNziIrA0+6KcNUH9vpCB4klRZ6OSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvODRjODViYWEtZTZhNy0z NmQ5LWJhMWUtMTZmZDA3ZmNiMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5RGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSDkzW0458ygZgIbNmA6c9I4r4uDtRk+s+g4vJx5KyQ0q1jgPJWi89Y Tb33KwIW7ff9k/yMZoNF/DiaU413mDEWAzocxa3eIygh8Y9REKsnOYufW0aDRJPZ Ub8UQbgwDE2CSxqSSiMvDl42V6S0sJ8wKlO6HTB6LUbHARz3+QxCyrpCpXhXHh0f SBUTnJT+imZwwuwMyWPZv9wFvLigi+h8zWNDWl9ePi5H/zBSavvfyAvdLrCrc4/L 7TplGGCJuahEf+/Uxz38RPKrXzNBYXEZG8o6KCqQPlLuVTys7cxZ+MHc9K1bB326 jeDJlVeVhO3BFUypBRv+77IdGCRsQso= -----END CERTIFICATE-----Generated at Mon Oct 20 00:53:00 2025 by rpki-client